Discover gists

## supply-chain-security.md

      
              1 file
            
          
              0 forks
            
          
                0 comments
              
            
              2 stars
            
          
                lhl
                / supply-chain-security.md
            
            
              Last active
              October 31, 2026 06:07
            
              
                Supply Chain Security for Software Developers - practical layered defenses after the 2026 TeamPCP campaign (Trivy/LiteLLM/axios)
              
          
    Supply Chain Security for Software Developers

Practical, layered defenses against package supply chain attacks. Written after the March–April 2026 wave of supply chain compromises: Trivy and LiteLLM (TeamPCP), and axios (Sapphire Sleet / UNC1069).
What Happened

Three major supply chain attacks hit within two weeks, exposing how fragile implicit trust in open-source tooling can be.
Trivy (TeamPCP, March 19–22): Aqua Security's Trivy vulnerability scanner — the most widely used open-source scanner in cloud-native CI/CD — was compromised in a multi-phase attack. An earlier breach in February via a misconfigured pull_request_target workflow stole a Personal Access Token. Credential

  
## .md

      
              1 file
            
          
              1 fork
            
          
                1 comment
              
            
              3 stars
            
          
                5T33Z0
                / .md
            
            
              Created
              October 30, 2026 18:12
            
              
                Extracting Intel Video BIOS Table (vbt.bin) via Live Linux
              
          
    Extracting Intel Video BIOS Table (vbt.bin) via Live Linux

This guide covers how to reliably dump the native Video BIOS Table (VBT) for an Intel Integrated GPU (iGPU) using a Live Linux environment.

Background

On modern UEFI systems (CSM disabled) or switchable graphics laptops (Intel iGPU + AMD/NVIDIA dGPU), bootloaders like Clover often fail to dump the Intel VBIOS. Clover's legacy F6 shortcut dumps memory region 0xC0000, which either dumps the discrete GPU ROM or an empty memory block.

  
## AGENT_GUIDE.md

      
              16 files
            
          
              0 forks
            
          
                0 comments
              
            
              2 stars
            
          
                ale-rinaldi
                / AGENT_GUIDE.md
            
            
              Last active
              October 31, 2026 06:01
            
              
                macOS and Linux: share one Codex app-server between Desktop, CLI and Remote — setup, verification and rollback
              
          
    Instructions for a Codex agent applying this Gist

Linux targets

For Linux, read LINUX.md and the Linux scripts first. Do not execute the macOS .command scripts. Inspect the installed application for endpoint support, use systemd user services and a per-user desktop override, and keep the same verification and self-interruption safeguards below. The bundled executable may work as a CLI while lacking the complete package needed for managed-daemon startup; the tested Linux adaptation uses a daemon-only package. Do not publish machine logs, account IDs, thread IDs or credentials.
Objective

Configure the target Mac so ChatGPT Desktop and Codex CLI attach to one managed Codex app-server, with Remote using that same host. The practical outcome is that a user can view and control the same running chat from a terminal, desktop app or paired phone without cancelling the task to change interfaces.

  
## jwplayer.html
<script type='text/javascript' src='http://YOUR-CLOUDFRONT-SPECIFIC-SUBDOMAIN.cloudfront.net/video/swfobject.js'></script>

<div id='mediaspace'>This text will be replaced</div>
<script type="text/javascript">
  // see http://blog.deconcept.com/swfobject/ for documentation on SWFObject function
  var so = new SWFObject('http://YOUR-CLOUDFRONT-SPECIFIC-SUBDOMAIN.cloudfront.net/video/player.swf','mpl',"640","360",'9');
  so.addParam('allowfullscreen','true');
  so.addParam('allowscriptaccess','always');
  so.addParam('wmode','opaque');

## DEBLOAT.md

      
              2 files
            
          
              14 forks
            
          
                8 comments
              
            
              124 stars
            
          
                lucataco
                / DEBLOAT.md
            
            
              Last active
              October 31, 2026 05:59
            
              
                webos-debloat: reversible debloat for rooted LG webOS TVs (hide bloat tiles, stop preloading, turn off promos/ACR)
              
          
    webos-debloat

One shell script that makes a rooted LG webOS TV lighter and quieter:

hides bloat tiles and background apps from the launcher
stops preloading apps the TV keeps in RAM whether or not you open them
turns off home-screen promotions, promo videos, sports alerts,
content recommendations and Live Plus (ACR)

Nothing is deleted and the root filesystem is never touched. It only edits

  
## youtube_formats.md

      
              1 file
            
          
              27 forks
            
          
                129 comments
              
            
              318 stars
            
          
                MartinEesmaa
                / youtube_formats.md
            
            
              Last active
              October 31, 2026 05:56
                — forked from AgentOak/youtube_formats.md
            
              
                Youtube Format IDs
              
          
    Note: This is all almost full YouTube ID informations. Original owner goes to AgentOak, modified version by Martin Eesmaa.
See the credits and also special thanks in below.
Before this gist has been forked, AgentOak made original gist back in November 13th 2019 and it was last updated on May 5th 2021.
From now on, this forked gist is maintained by Martin Eesmaa since 17th September 2022. I joined to yt-dlp Discord server on 3rd April 2026 with my Discord username: martineesmaa.
Last updated: 11 October 2026

  
## ytmusic.mjs
import { existsSync, readFileSync, writeFileSync } from 'node:fs';
import path from 'node:path';
import { spawn } from 'node:child_process';

const BASE_URL = 'https://music.youtube.com';
const COOKIE_PATH = new URL('ytmusic.txt', import.meta.url).pathname;

const FILTER_PARAMS = {
  songs: 'EgWKAQIIAWoSEAUQAxAJEAoQERAQEAQQDhAV',
  videos: 'EgWKAQIQAWoSEAUQAxAJEAoQERAQEAQQDhAV',

## privacy-policy-discord-bots.txt
Privacy Policy for [Bot Name]

This Privacy Policy governs the collection, use, and sharing of personal information by [Bot Name], a Discord bot developed by [Developer Name]. By using [Bot Name], you agree to the terms of this Privacy Policy.

Information We Collect

We collect information that you provide to us through your use of the bot, such as your Discord user ID and username, server and channel information, and message content. We may also collect usage data, such as the frequency and duration of your use of the bot.

How We Use Your Information

## libretv-sources.json
{
  "name": "yifan 精选源列表 (2026-10-13 实测可用)",
  "version": 2,
  "sources": [
    { "name": "暴风资源", "url": "https://bfzyapi.com/api.php/provide/vod", "isAdult": false },
    { "name": "非凡资源", "url": "https://cj.ffzyapi.com/api.php/provide/vod", "isAdult": false },
    { "name": "量子资源", "url": "https://cj.lziapi.com/api.php/provide/vod", "isAdult": false },
    { "name": "无尽资源", "url": "https://api.wujinapi.me/api.php/provide/vod", "isAdult": false },
    { "name": "优酷资源", "url": "https://api.ukuapi88.com/api.php/provide/vod", "isAdult": false },
    { "name": "光速资源", "url": "https://api.guangsuapi.com/api.php/provide/vod", "isAdult": false },

## DS3231-NTP-Sync.cpp
/****************************************************************
 *
 * From: https://forum.dronebotworkshop.com/c-plus-plus/setting-the-time-on-an-rtc-with-an-esp8266-and-an-ntp-server/?utm_source=pocket_mylist

 * As we still haven't got rid of this antiquated requirement of adjusting our clocks twice
 * every year, and as I have a few real-time clocks attached to various mini-projects that
 * have to be reset every time this happens. I decided it was time to automate this process
 * a little, using an ESP8266 Node-MCU12-E and I2C.
 *
 * The wiring is simple:
	<script type='text/javascript' src='http://YOUR-CLOUDFRONT-SPECIFIC-SUBDOMAIN.cloudfront.net/video/swfobject.js'></script>

	<div id='mediaspace'>This text will be replaced</div>
	<script type="text/javascript">
	// see http://blog.deconcept.com/swfobject/ for documentation on SWFObject function
	var so = new SWFObject('http://YOUR-CLOUDFRONT-SPECIFIC-SUBDOMAIN.cloudfront.net/video/player.swf','mpl',"640","360",'9');
	so.addParam('allowfullscreen','true');
	so.addParam('allowscriptaccess','always');
	so.addParam('wmode','opaque');
	import { existsSync, readFileSync, writeFileSync } from 'node:fs';
	import path from 'node:path';
	import { spawn } from 'node:child_process';

	const BASE_URL = 'https://music.youtube.com';
	const COOKIE_PATH = new URL('ytmusic.txt', import.meta.url).pathname;

	const FILTER_PARAMS = {
	songs: 'EgWKAQIIAWoSEAUQAxAJEAoQERAQEAQQDhAV',
	videos: 'EgWKAQIQAWoSEAUQAxAJEAoQERAQEAQQDhAV',
	Privacy Policy for [Bot Name]

	This Privacy Policy governs the collection, use, and sharing of personal information by [Bot Name], a Discord bot developed by [Developer Name]. By using [Bot Name], you agree to the terms of this Privacy Policy.

	Information We Collect

	We collect information that you provide to us through your use of the bot, such as your Discord user ID and username, server and channel information, and message content. We may also collect usage data, such as the frequency and duration of your use of the bot.

	How We Use Your Information
	{
	"name": "yifan 精选源列表 (2026-10-13 实测可用)",
	"version": 2,
	"sources": [
	{ "name": "暴风资源", "url": "https://bfzyapi.com/api.php/provide/vod", "isAdult": false },
	{ "name": "非凡资源", "url": "https://cj.ffzyapi.com/api.php/provide/vod", "isAdult": false },
	{ "name": "量子资源", "url": "https://cj.lziapi.com/api.php/provide/vod", "isAdult": false },
	{ "name": "无尽资源", "url": "https://api.wujinapi.me/api.php/provide/vod", "isAdult": false },
	{ "name": "优酷资源", "url": "https://api.ukuapi88.com/api.php/provide/vod", "isAdult": false },
	{ "name": "光速资源", "url": "https://api.guangsuapi.com/api.php/provide/vod", "isAdult": false },
	/****************************************************************
	*
	* From: https://forum.dronebotworkshop.com/c-plus-plus/setting-the-time-on-an-rtc-with-an-esp8266-and-an-ntp-server/?utm_source=pocket_mylist

	* As we still haven't got rid of this antiquated requirement of adjusting our clocks twice
	* every year, and as I have a few real-time clocks attached to various mini-projects that
	* have to be reset every time this happens. I decided it was time to automate this process
	* a little, using an ESP8266 Node-MCU12-E and I2C.
	*
	* The wiring is simple: